refactor : disabled @EnableWebSecurity
This commit is contained in:
@@ -0,0 +1,21 @@
|
|||||||
|
package com.banjjoknim.playground.config;
|
||||||
|
|
||||||
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
||||||
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
||||||
|
|
||||||
|
// @EnableWebSecurity
|
||||||
|
public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
||||||
|
|
||||||
|
@Override
|
||||||
|
protected void configure(HttpSecurity http) throws Exception {
|
||||||
|
http.csrf().disable();
|
||||||
|
http.authorizeHttpRequests()
|
||||||
|
.antMatchers("/user/**").authenticated()
|
||||||
|
.antMatchers("/manager/**").hasAnyRole("MANAGER", "ADMIN")
|
||||||
|
.antMatchers("/admin/**").hasRole("ADMIN")
|
||||||
|
.anyRequest().permitAll()
|
||||||
|
.and()
|
||||||
|
.formLogin()
|
||||||
|
.loginPage("/login");
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user